Add CAA records

diff --git a/src/opengeodata b/src/opengeodata
index 07e0094029df674a6cb1694373292ddec6928623..9969e8a7e3ab29b548297b943ac100972b567387 100644 (file)
--- a/src/opengeodata
+++ b/src/opengeodata
@@ -8,6 +8,10 @@
 .opengeodata::b.ns.bytemark.co.uk
 .opengeodata::c.ns.bytemark.co.uk
 
+# Publish a CAA record indicating that only letsencrypt should issue certificates
+
+:opengeodata:257:\000\005\151\163\163\165\145\154\145\164\163\145\156\143\162\171\160\164\056\157\162\147
+
 # Main web server and it's aliases
 
 +opengeodata:193.60.236.19:600

diff --git a/src/openstreetmap b/src/openstreetmap
index 952d4eb3846a96363a3089a446a193f1d8eb8bf6..bab02283c635b1c21f468b1f755ad2bcd94379cb 100644 (file)
--- a/src/openstreetmap
+++ b/src/openstreetmap
@@ -11,6 +11,10 @@ Zopenstreetmap:a.ns.bytemark.co.uk:hostmaster.openstreetmap.org:::::300
 .openstreetmap::b.ns.bytemark.co.uk
 .openstreetmap::c.ns.bytemark.co.uk
 
+# Publish a CAA record indicating that only letsencrypt should issue certificates
+
+:openstreetmap:257:\000\005\151\163\163\165\145\154\145\164\163\145\156\143\162\171\160\164\056\157\162\147
+
 # Make the virtual machine the primary MX with Bytemark as backup
 
 @openstreetmap:212.110.172.32:a:10
@@ -24,8 +28,8 @@ Zopenstreetmap:a.ns.bytemark.co.uk:hostmaster.openstreetmap.org:::::300
 
 'openstreetmap:v=spf1 ip4\07289.16.179.150 ip4\072212.110.172.32 ip6\0722001\07241c8\07210\072996\07221d\0727dff\072fec3\072df70 ip6\0722001\07241c9\0721\072400\072\07232 ~all
 
-# Add Google Postmaster Tools Verification
-# Grant
+# Google postmaster tools verification
+
 Caf323lytato5.openstreetmap:gv-o4v3qh5pfayqex.dv.googlehosted.com
 
 # Delegate geo.openstreetmap.org to PowerDNS

diff --git a/src/openstreetmap-uk b/src/openstreetmap-uk
index 185bfb5ecfd98ae36e5995f935b9732ee10171e5..bed64e562a7ba8b323d18f75bc2c9a48fcf1436c 100644 (file)
--- a/src/openstreetmap-uk
+++ b/src/openstreetmap-uk
@@ -8,6 +8,10 @@
 .openstreetmap-uk::b.ns.bytemark.co.uk
 .openstreetmap-uk::c.ns.bytemark.co.uk
 
+# Publish a CAA record indicating that only letsencrypt should issue certificates
+
+:openstreetmap-uk:257:\000\005\151\163\163\165\145\154\145\164\163\145\156\143\162\171\160\164\056\157\162\147
+
 # Make the virtual machine the primary MX with Bytemark as backup
 
 @openstreetmap-uk::a.mx.openstreetmap.org:10

diff --git a/src/openstreetmap-za b/src/openstreetmap-za
index 0781d898270270045f8a1a8f132e509bcc187e20..aa93b725c002159211eb6434067e0d0e6880b533 100644 (file)
--- a/src/openstreetmap-za
+++ b/src/openstreetmap-za
@@ -8,6 +8,10 @@
 .openstreetmap-za::b.ns.bytemark.co.uk
 .openstreetmap-za::c.ns.bytemark.co.uk
 
+# Publish a CAA record indicating that only letsencrypt should issue certificates
+
+:openstreetmap-za:257:\000\005\151\163\163\165\145\154\145\164\163\145\156\143\162\171\160\164\056\157\162\147
+
 # Make the virtual machine the primary MX with Bytemark as backup
 
 @openstreetmap-za::a.mx.openstreetmap.org:10

diff --git a/src/osmfoundation b/src/osmfoundation
index d11a775b175e85a1241b1a5b96ec98cb2a310b88..8f24f052484ba0b5f21d4bf0a0f261ff00e62322 100644 (file)
--- a/src/osmfoundation
+++ b/src/osmfoundation
@@ -8,6 +8,10 @@
 .osmfoundation::b.ns.bytemark.co.uk
 .osmfoundation::c.ns.bytemark.co.uk
 
+# Publish a CAA record indicating that only letsencrypt should issue certificates
+
+:osmfoundation:257:\000\005\151\163\163\165\145\154\145\164\163\145\156\143\162\171\160\164\056\157\162\147
+
 # SPF Record
 
 'osmfoundation:v=spf1 a\072shenron.openstreetmap.org include\072_spf.google.com ~all:3600

diff --git a/src/stateofthemap b/src/stateofthemap
index a5815a4d9bfdde7c02c7d7aa5c8a426cdca618eb..b9d5bd5fe026bd56d04be824f17174ae361e882e 100644 (file)
--- a/src/stateofthemap
+++ b/src/stateofthemap
@@ -8,6 +8,10 @@
 .stateofthemap::b.ns.bytemark.co.uk
 .stateofthemap::c.ns.bytemark.co.uk
 
+# Publish a CAA record indicating that only letsencrypt should issue certificates
+
+:stateofthemap:257:\000\005\151\163\163\165\145\154\145\164\163\145\156\143\162\171\160\164\056\157\162\147
+
 # Let google handle email
 
 @stateofthemap::aspmx.l.google.com:1:3600

diff --git a/src/stateofthemap-eu b/src/stateofthemap-eu
index 15a78faa762f6da5a5ee0afc671b4c6b5c14276a..8bdf20d73959df609ecb4ce1573b9b24123ec9bd 100644 (file)
--- a/src/stateofthemap-eu
+++ b/src/stateofthemap-eu
@@ -8,6 +8,10 @@
 .stateofthemap-eu::b.ns.bytemark.co.uk
 .stateofthemap-eu::c.ns.bytemark.co.uk
 
+# Publish a CAA record indicating that only letsencrypt should issue certificates
+
+:stateofthemap-eu:257:\000\005\151\163\163\165\145\154\145\164\163\145\156\143\162\171\160\164\056\157\162\147
+
 # Let openstreetmap.at handle email for the moment
 
 @stateofthemap-eu::openstreetmap.at:1:3600

diff --git a/src/switch2osm b/src/switch2osm
index 747ce7387c687e260369cd41036313aca3489b59..3195e795d3dd84cb46cc7f92892f266d410fda9f 100644 (file)
--- a/src/switch2osm
+++ b/src/switch2osm
@@ -8,6 +8,10 @@
 .switch2osm::b.ns.bytemark.co.uk
 .switch2osm::c.ns.bytemark.co.uk
 
+# Publish a CAA record indicating that only letsencrypt should issue certificates
+
+:switch2osm:257:\000\005\151\163\163\165\145\154\145\164\163\145\156\143\162\171\160\164\056\157\162\147
+
 # Main web server and it's aliases
 
 +switch2osm:193.60.236.19:600